Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3230203d3e203237363933.roa
File:                     3138362e3233362e38302e302f32302d3230203d3e203237363933.roa (raw, json)
Hash identifier:          Q7BlboOCIYL7bmnpWcAjk5i9mv3LfgHOmJxpX7VJVxA=
Subject key identifier:   B2:D6:D7:D8:51:04:47:B5:BC:EE:0D:04:AF:59:65:B1:B2:E5:4B:64
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       045A0A7B4350FAEE80E1244D5F3F7793EC3406DB
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3230203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:16 +0000
ROA not before:           Tue 22 Oct 2024 14:25:16 +0000
ROA not after:            Tue 21 Oct 2025 14:30:16 +0000
asID:                     27693
IP address blocks:        186.236.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:0a:7b:43:50:fa:ee:80:e1:24:4d:5f:3f:77:93:ec:34:06:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:16 2024 GMT
            Not After : Oct 21 14:30:16 2025 GMT
        Subject: CN=B2D6D7D8510447B5BCEE0D04AF5965B1B2E54B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:52:66:78:98:bd:d7:1f:3b:d8:5a:55:24:
                    96:dc:c6:52:2b:42:6d:82:9b:c2:27:f0:43:96:81:
                    ee:20:ba:cb:d0:06:7d:30:df:1e:8f:8b:01:30:d6:
                    91:46:d0:5b:19:22:ae:6d:aa:e6:5f:95:78:7c:fa:
                    cd:23:0a:c4:9f:02:65:63:f3:76:62:3e:5e:1d:dc:
                    80:4a:0d:9d:5b:46:c6:13:9d:e6:ae:f2:e5:5c:0b:
                    1e:ca:8a:37:f2:09:4e:ce:44:75:46:89:da:c4:c0:
                    da:24:a5:a1:bb:7f:32:32:af:fe:7c:4c:4f:99:0f:
                    1a:8f:cf:a2:f8:5d:a8:41:eb:48:52:ae:66:84:97:
                    a8:89:5c:58:d3:57:7e:f9:35:92:31:c1:37:75:fc:
                    1a:d3:eb:e2:94:7e:f1:40:a3:e3:28:3c:dc:93:31:
                    78:04:d1:2d:61:ca:f2:a3:a3:33:d3:52:94:70:5b:
                    a0:48:2f:22:ae:22:f1:84:e4:41:36:87:9d:b7:66:
                    d1:aa:89:21:2d:95:84:56:d3:1f:e6:6d:16:df:8f:
                    c6:0d:ed:9e:47:53:94:b0:10:ff:44:df:b6:27:02:
                    22:3a:77:c7:b6:ad:2b:2c:6c:24:e3:ff:96:7b:e7:
                    3d:dc:35:b5:9d:1a:e3:01:85:9b:ef:20:b3:64:3e:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:D7:D8:51:04:47:B5:BC:EE:0D:04:AF:59:65:B1:B2:E5:4B:64
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3230203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:c2:72:14:f6:03:79:ac:80:8b:7e:af:ea:c0:cb:40:8d:
         d2:0d:18:87:6f:7d:e0:b1:20:f7:ee:f6:b9:41:6c:83:dd:12:
         ca:30:44:d9:45:f4:e9:f3:96:3a:df:eb:7c:de:59:e8:ee:e6:
         89:ae:b2:64:47:c8:64:2d:65:f7:79:0d:e4:e2:c3:8d:0b:59:
         3d:67:e0:c0:a3:e3:17:24:dd:b1:c6:24:8c:1b:7f:19:16:69:
         21:9f:58:1f:72:e1:7b:75:ce:64:20:ec:d7:43:c8:34:02:44:
         96:45:da:35:d8:64:09:6d:d3:3d:4e:14:47:b9:15:66:c3:fc:
         e0:0c:bf:6b:56:98:1f:1a:0a:f5:3a:73:8c:c5:59:47:5d:40:
         49:7d:9a:e2:52:ff:dc:64:00:0b:06:ca:2c:e3:a7:d9:e5:c3:
         8e:84:8f:c3:d2:b5:6a:4d:37:af:34:21:e1:1f:b2:04:9c:b7:
         3a:60:be:fa:77:3c:55:6d:fc:4f:6d:54:8d:9f:b5:7e:21:04:
         20:68:1c:59:65:51:a4:76:69:c3:f5:ae:1b:ae:01:55:51:75:
         7b:87:a7:b4:37:06:70:89:8e:aa:b4:27:06:e4:fe:81:32:b5:
         3a:29:7e:f7:55:6c:87:0a:08:1d:ad:3b:d7:9f:d2:4e:99:1f:
         3b:4b:1e:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBFoKe0NQ+u6A4SRNXz93k+w0BtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0NTQzOTA5OUM3OUMxM0Y1ODNEMjIzOEUzQkI3RDBE
NjBENjg3NzAeFw0yNDEwMjIxNDI1MTZaFw0yNTEwMjExNDMwMTZaMDMxMTAvBgNV
BAMTKEIyRDZEN0Q4NTEwNDQ3QjVCQ0VFMEQwNEFGNTk2NUIxQjJFNTRCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRW1JmeJi91x872FpVJJbcxlIr
Qm2Cm8In8EOWge4gusvQBn0w3x6PiwEw1pFG0FsZIq5tquZflXh8+s0jCsSfAmVj
83ZiPl4d3IBKDZ1bRsYTneau8uVcCx7KijfyCU7ORHVGidrEwNokpaG7fzIyr/58
TE+ZDxqPz6L4XahB60hSrmaEl6iJXFjTV375NZIxwTd1/BrT6+KUfvFAo+MoPNyT
MXgE0S1hyvKjozPTUpRwW6BILyKuIvGE5EE2h523ZtGqiSEtlYRW0x/mbRbfj8YN
7Z5HU5SwEP9E37YnAiI6d8e2rSssbCTj/5Z75z3cNbWdGuMBhZvvILNkPibZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUstbX2FEER7W87g0Er1llsbLlS2QwHwYDVR0j
BBgwFoAUM0VDkJnHnBP1g9Ijjju30NYNaHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC8zMzQ1NDM5MDk5Qzc5QzEzRjU4M0QyMjM4RTNCQjdEMEQ2MEQ2ODc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNDU0MzkwOTlDNzlDMTNG
NTgzRDIyMzhFM0JCN0QwRDYwRDY4NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzEzODM2MmUzMjMzMzYyZTM4MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM3
MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuuxQMA0GCSqGSIb3DQEBCwUAA4IBAQAnscJyFPYD
eayAi36v6sDLQI3SDRiHb33gsSD37va5QWyD3RLKMETZRfTp85Y63+t83lno7uaJ
rrJkR8hkLWX3eQ3k4sONC1k9Z+DAo+MXJN2xxiSMG38ZFmkhn1gfcuF7dc5kIOzX
Q8g0AkSWRdo12GQJbdM9ThRHuRVmw/zgDL9rVpgfGgr1OnOMxVlHXUBJfZriUv/c
ZAALBsos46fZ5cOOhI/D0rVqTTevNCHhH7IEnLc6YL76dzxVbfxPbVSNn7V+IQQg
aBxZZVGkdmnD9a4brgFVUXV7h6e0NwZwiY6qtCcG5P6BMrU6KX73VWyHCggdrTvX
n9JOmR87Sx6N
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:04 2025 by rpki-client